Live data from Hacker News

The DNC data breach

blog.ngpvan.com

31–40 of 88 posts

Re: The DNC data breach

#31
post #29

Earlier quoted context omitted.

Difficulty level in replicating this dataset from secretary of state rolls?

My understanding is that the DNC contracts with VAN to manage the voter files for all fifty states. It's a shared database, with candidates able to build up their own data on top. All the campaigns can see the underlying voter data, but they additions they make are private to the individual campaign. The Sanders campaign staffers realized they were able to see Clinton campaign data they should not have access to. Tha…

>The Sanders people didn't abuse the bug in any significant way, in fact they reported it.

That is pure conjecture and I'm not even sure the Sanders campaign would agree with you considering they have fired a staffer over this.

Re: The DNC data breach

#32
post #18

For those that are not familiar with the space, campaigns typically use voter contact software to record the results of the conversations they have with potential voters on the phones, at the doors, and over the Internet. In this case, the voter contact software that both the Hillary and Sanders campaigns were using, NGP VAN, had a bug which allowed both campaigns to access each other's private, proprietary data (in…

Here's an interview the Sanders campaign staffer who was fired gave explaining just what you describe: http://www.msnbc.com/thomas-roberts/watch/fired-sanders-camp...

Wow, that interview is incredibly hostile.

Re: The DNC data breach

#33
A bug of that nature, completely bypassing all permissions, made it past testing (I presume they test). Whatever happened afterward is noise to me. How the hell do you let that happen?

Hardly getting any blame is a neat trick. I wish I had that luxury.

Re: The DNC data breach

#34
post #28
post #25

Earlier quoted context omitted.

I think it is pretty unreasonable. As you note, there is no technical reason to deny the Bernie campaign access to their data. The Bernie campaign has fully indicated they want and are willing to cooperate with a third party investigation into the data breach, which would require investigating both campaigns, the DNC, and NPG VAN. Given they are already willing to share everything they know about the incident, there…

There is no technical reason, but that doesn't mean there is no reason. Sanders campaign may have violated rules. The DNC has thrown them in jail without bail in hopes that it gets things resolved quickly. I have no problem with that. If the DNC drags this process out that would be a very different story.

It's way too early for the DNC to take punitive actions against any campaign. They shouldn't do that until there is evidence that data was misused. Currently there is no evidence, and I doubt any will appear.

Re: The DNC data breach

#35
post #31
post #29

Earlier quoted context omitted.

My understanding is that the DNC contracts with VAN to manage the voter files for all fifty states. It's a shared database, with candidates able to build up their own data on top. All the campaigns can see the underlying voter data, but they additions they make are private to the individual campaign. The Sanders campaign staffers realized they were able to see Clinton campaign data they should not have access to. Tha…

>The Sanders people didn't abuse the bug in any significant way, in fact they reported it. That is pure conjecture and I'm not even sure the Sanders campaign would agree with you considering they have fired a staffer over this.

See the MSNBC interview with the fired staffer. They were trying to understand the extent of the disclosure in preparation for reporting it.

Re: The DNC data breach

#36
post #31
post #29

Earlier quoted context omitted.

My understanding is that the DNC contracts with VAN to manage the voter files for all fifty states. It's a shared database, with candidates able to build up their own data on top. All the campaigns can see the underlying voter data, but they additions they make are private to the individual campaign. The Sanders campaign staffers realized they were able to see Clinton campaign data they should not have access to. Tha…

>The Sanders people didn't abuse the bug in any significant way, in fact they reported it. That is pure conjecture and I'm not even sure the Sanders campaign would agree with you considering they have fired a staffer over this.

The fact that every search, export, and page access is logged, and that the Sanders people knew everything they did would be traceable, do you think they really would have tried to hoover up a bunch of Clinton data? The VAN CEO is emphatic that none of the exposed data was ever exportable.

Re: The DNC data breach

#37
post #18

Earlier quoted context omitted.

Here's an interview the Sanders campaign staffer who was fired gave explaining just what you describe: http://www.msnbc.com/thomas-roberts/watch/fired-sanders-camp...

Wow, that interview is incredibly hostile.

How so? It seemed completely fair to me - yes, he pushed the staffer a bit but would there have been a point to the interview if he hadn't?

I'm not quite sure if I believe the Sanders campaign story, but that seems independent from the quality of the interview; even if you do, it shouldn't be a bad thing to ask more questions of individuals involved.

Re: The DNC data breach

#38
post #26

Earlier quoted context omitted.

Not technically difficult but incredibly tedious. First, you have to go out and collect it from all 50 Secretaries of State, and in come cases county officials. Some states send you the data on a CD (no joke). You then have to clean the data, which is often not in great shape, and then normalize it. Even then, you only have a snapshot, because the states typically don't keep historical data. What this means is that y…

Except it wasn't just a list of voters. It also included "client scores". That means the Sanders campaign had access to modelling information regarding the Clinton campaign's list. It is pretty valuable knowing how the other campaign values and/or targets specific voters and that is something that obviously can't be found from public info.

> That means the Sanders campaign had access to modelling information regarding the Clinton campaign's list.

And also means that Clinton's campaign had access to the Sanders' campaign data.

Re: The DNC data breach

#39

For those that are not familiar with the space, campaigns typically use voter contact software to record the results of the conversations they have with potential voters on the phones, at the doors, and over the Internet. In this case, the voter contact software that both the Hillary and Sanders campaigns were using, NGP VAN, had a bug which allowed both campaigns to access each other's private, proprietary data (in…

That's interesting, thanks for adding that explanation for us not in the space.

What I'm surprised about is that the campaigns are willing to let this data be stored in the cloud on shared systems. I would have expected all proprietary data to be stored locally by each campaign on private in-house servers, probably with periodic data dumps of updates from the data provider.

Re: The DNC data breach

#40

For those that are not familiar with the space, campaigns typically use voter contact software to record the results of the conversations they have with potential voters on the phones, at the doors, and over the Internet. In this case, the voter contact software that both the Hillary and Sanders campaigns were using, NGP VAN, had a bug which allowed both campaigns to access each other's private, proprietary data (in…

Difficulty level in replicating this dataset from secretary of state rolls?

I've been working on a project like this for some time now - and wresting with whether I want to go the community-based vs. closed source model.

The problems listed below are pretty exact: huge data sets, lots of cleaning and normalizing, and the snail mail/cd problem is real. Additionally, I'd note that ~40% of the states [somehow] charge for the data...it takes six digits to get a snapshot of all 50 states - and certain states (looking at you FL) say that they do not store the historical, meaning you have to connect with the local BoE's to aggregate the data.

A part of me [now] wants to open source this because of the DNC's actions.

Post reply on HN